
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft
File: aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft (raw, json)
Hash identifier: tCDK/SlX1T5n3CXZL5ab0KaR8tw7Se4W/N9BAUznhRo=
Subject key identifier: 1A:64:96:2F:C7:9B:F0:72:FF:99:B6:7C:61:58:76:B7:0F:1F:11:83
Authority key identifier: 68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52
Certificate issuer: /CN=A91DCAE8/serialNumber=684597E998A3A0C6987361B7C572043A816C1C52
Certificate serial: 89
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft
Manifest number: 87
Signing time: Thu 16 Jul 2026 14:46:49 +0000
Manifest this update: Thu 16 Jul 2026 14:46:48 +0000
Manifest next update: Thu 23 Jul 2026 14:46:48 +0000
Files and hashes: 1: aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl (hash: 0nisbwMAmPjKKnPZ/1zV1OiZWGL9wUznoCShZEu9lk0=)
2: 12E8FD5CBECC11F098CFE015C4F9AE02.roa (hash: 2fuL5HR83y1lHVu02OBTTtqwAHQ9hwGuikZsXGexJqo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl
rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Jul 2026 14:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DCAE8, serialNumber=684597E998A3A0C6987361B7C572043A816C1C52
Validity
Not Before: Jul 16 14:46:48 2026 GMT
Not After : Jul 23 14:46:48 2026 GMT
Subject: CN=6a58eed9-dd7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:f8:3a:84:93:19:e4:95:99:89:d1:d6:0f:
f4:20:11:44:8f:9c:4e:c7:ae:40:1f:8e:3b:f0:2e:
ea:99:37:c0:ae:61:48:9f:b2:27:19:c6:87:dd:c8:
2b:64:dc:68:13:04:b0:e8:7c:77:03:92:96:20:33:
60:19:62:76:2f:89:dd:67:19:eb:4c:f5:2f:d5:d6:
1a:3f:74:c1:ca:6a:98:ea:bb:bc:c7:21:49:21:87:
2b:a0:11:b6:77:b3:b1:c2:06:fc:08:10:f0:17:0a:
a9:ba:bc:a0:35:71:65:ff:82:36:ff:df:8d:ab:d6:
ce:bd:17:34:97:ba:2b:16:2d:e8:5c:80:94:93:62:
12:9d:cf:43:ce:b6:22:66:16:e7:dd:d3:b1:4f:f7:
56:86:4c:48:0c:bc:31:04:60:e0:37:38:84:58:cd:
90:4a:80:d6:7a:69:5d:fe:64:6c:56:7c:bc:90:10:
c8:9a:af:83:e8:e1:85:bd:a5:66:58:08:bb:cc:0e:
5b:aa:ac:87:35:86:13:a0:27:35:29:1a:15:a5:54:
c2:14:f6:d0:7c:c8:8c:67:eb:cf:fb:82:6d:a0:b0:
68:6c:c4:72:76:fa:d0:44:30:63:ec:f3:46:89:7c:
9a:fb:3d:d4:51:94:2b:e8:34:49:23:a5:a8:8c:b7:
c4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:64:96:2F:C7:9B:F0:72:FF:99:B6:7C:61:58:76:B7:0F:1F:11:83
X509v3 Authority Key Identifier:
keyid:68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
aa:99:24:99:82:73:bb:e7:0b:92:b5:bb:92:e1:8a:b9:01:60:
55:d4:49:d5:c2:f8:c6:f8:0a:a1:d0:22:3c:df:fd:02:a5:b1:
52:12:78:71:b2:e7:32:19:7e:c9:00:80:8a:cd:d8:54:8b:b4:
26:df:56:4f:74:70:b9:9f:92:94:1a:b0:1e:40:4e:c6:03:e1:
c3:0d:29:8c:7a:c1:8a:b3:97:28:c8:d6:49:96:87:f6:35:58:
c8:34:dc:5b:70:2b:82:65:11:2c:50:be:6a:4f:ea:d8:5e:dd:
0c:ed:54:87:13:16:30:8d:14:75:7b:df:5b:20:07:78:61:65:
3c:2a:bc:db:fe:61:af:b8:f9:20:b9:ea:1e:8f:2c:89:68:a5:
1a:84:7a:be:cd:a3:4b:9c:a3:83:1e:bf:ab:0d:2d:c4:b1:0f:
85:e4:85:8b:74:74:29:9c:b3:d7:a3:1f:cf:74:bd:ad:e5:8c:
26:56:9c:66:70:06:c3:25:12:22:e2:32:4b:56:ac:68:3f:2b:
46:12:fb:7e:66:16:75:f0:33:0f:c0:5c:d1:61:81:5b:38:bc:
17:99:6d:f3:39:08:92:2e:01:c0:34:c9:eb:b9:1e:28:cf:a9:
d4:4b:c6:1d:a4:62:d6:a2:48:de:eb:21:fb:61:9c:69:7f:82:
59:d1:d6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:28:21 2026 by rpki-client